trend-jacking

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). SKILL.md's monitoring workflow ("第1步：建立趋势监控系统") explicitly instructs checking and using open public social sources (e.g., 小红书热搜榜, 微博热搜, 抖音热门, B站热门) and third‑party trend tools, meaning the agent would ingest and act on untrusted user-generated third‑party content that can influence decisions.